Furntec Payment Gateway Plugin

The Furntec Payment Gateway Plugin is a unified payment integration layer connecting Furntec.in to Indian payment gateways — primarily Razorpay, with Cashfree as failover — enabling UPI, credit/debit cards, net banking, and B2B invoice payments in a single customer flow.

This is not a standalone product sold to third parties in Year 1 — it is a critical platform plugin that enforces Furntec's structural working capital protection: payment-confirmed production. No custom product enters CM production without confirmed customer payment.

Strategic value: Eliminates manual bank transfer dependency; enables one-click payment from configurator quote; triggers automated CM work order release on payment confirmation; provides audit trail for IPO-grade financial governance.

Year 1 target: 100% of D2C orders via payment link (Razorpay/Cashfree) — zero bank transfer requirement in Month 1 per board mandate. B2B milestone payments (30/40/30) supported from Month 6.

Plugin module (payment-gateway.php): Provider abstraction layer — createPaymentOrder(), verifyRazorpaySignature(), provider switch via PAYMENT_GATEWAY env var (razorpay | cashfree).

API endpoints: /api/payment/create-order.php — creates gateway order, logs to payment_orders MySQL table, returns orderId + paymentUrl/keyId for checkout. /api/payment/webhook.php — confirms payment, updates status, triggers production release flag.

Supported methods: UPI (primary — 55%+ of Indian e-commerce), Credit/Debit cards, Net banking, Wallets. B2B: Payment links for invoice + milestone schedule (30% advance, 40% mid-production, 30% pre-dispatch).

Checkout flows: (a) Configurator → Calculate price → Pay button → Razorpay checkout modal → Payment confirmed → Order created; (b) WhatsApp quote → Payment link in message → Customer pays → Auto-confirmation to Inside Sales; (c) B2B portal → Generate quote PDF → Send payment link → Milestone tracking.

Core rule: production_released = 0 until payment_orders.status = "paid" AND payment_confirmed_at IS NOT NULL. CM work order API checks this flag before releasing to Polishmen/Balaji/secondary CMs.

Webhook flow: Razorpay payment.captured event → verify signature → update payment_orders → insert orders table → send WhatsApp confirmation to customer → notify CM via work order queue → update daily booking dashboard.

Reconciliation: Daily automated match between gateway settlement report and payment_orders table. Accounts team dashboard shows unmatched payments — target zero unmatched by T+1.

Refund policy: Pre-production cancellation — full refund via gateway API. Post-production — case-by-case; system blocks refund API call if production_released = 1 without manager approval code.

GST compliance: Invoice generation triggered on payment confirmation — GSTIN captured at checkout for B2B; automated GST calculation on sell price from Pricing Engine output.

Gateway plugin does not generate direct revenue — it enables revenue collection. Year 1 Rs. 34 Cr revenue must flow through gateway (target 85%+ D2C, 60%+ B2B by Month 12).

Transaction cost: Razorpay ~1.8–2.0% on cards/UPI; Cashfree competitive. Year 1 gateway fees: Rs. 61–68 Lakhs on Rs. 34 Cr (within COGS/logistics budget). Negotiate enterprise rates at Rs. 50 Cr+ annual volume.

Working capital benefit: Payment-confirmed production means trade receivables near-zero for D2C. Avoided WC requirement: estimated Rs. 3–5 Cr vs traditional 30-day credit model.

Development cost: Rs. 8–12 Lakhs (gateway integration, webhook handler, MSSQL logging, admin reconciliation UI, B2B milestone module). Ongoing: Rs. 3 Lakhs/year maintenance.

Environment variables: RAZORPAY_KEY_ID, RAZORPAY_KEY_SECRET, CASHFREE_APP_ID, CASHFREE_SECRET_KEY, PAYMENT_GATEWAY=razorpay. Store in Hostinger hPanel Environment Variables — never commit secrets.

Database tables: payment_orders (order_ref, gateway_provider, gateway_order_id, amount, status, customer details, production_released); orders (links payment to pricing_quote and CM assignment).

Webhook endpoint: https://www.furntec.in/api/payment/webhook.php — must be HTTPS (Hostinger SSL via Let's Encrypt). Razorpay webhook secret for signature verification.

Hostinger shared hosting: PHP handles webhook on same hosting as frontend — no separate payment server needed. Ensure cURL is enabled (standard on Hostinger).

Failover: If Razorpay downtime >15 minutes, admin can switch PAYMENT_GATEWAY=cashfree via Hostinger hPanel env — plugin abstraction handles provider switch without code deploy.

PCI-DSS: No card data stored on Furntec servers — all card handling via Razorpay/Cashfree hosted checkout (SAQ-A eligible).

Webhook security: HMAC signature verification on every webhook; reject unsigned requests; idempotency key on payment confirmation to prevent double-processing.

Audit trail: Every payment state change logged with timestamp, source (webhook/manual/admin), IP address. IPO-ready payment audit export from Month 1.

SEBI compliance (Year 2 IPO): Payment reconciliation reports, related-party transaction documentation, revenue recognition alignment (dispatch-based) with payment confirmation timestamps.

Data privacy: Customer phone/email stored with encryption; GDPR-style deletion on customer request for D2C accounts.

Month 1 (Day 1 Critical): Razorpay integration live for D2C orders. WhatsApp quote link flow with payment link. Payment confirmed → CM notification via WhatsApp Business API.

Month 2–3: Webhook-triggered order creation in MSSQL/MySQL; inside sales dashboard for payment status; reconciliation export for accounts.

Month 4–6: Cashfree failover tested and documented; B2B milestone payment module (30/40/30); GST invoice auto-generation on payment.

Month 7–12: Razorpay Smart Collect for dealer subscriptions; Payment links API for WhatsApp Business; audit trail export for CA and investors.

Year 2: Enterprise gateway rates negotiation; international payment support (NRI customers); UPI AutoPay for subscription/maintenance plans.

Year 1: Gateway fees Rs. 61–68 Lakhs · WC benefit Rs. 3–5 Cr · Development Rs. 10–12 Lakhs · Net WC saving Rs. 2.5–4.8 Cr

Year 2: Gateway fees Rs. 1.6–1.8 Cr · Revenue Rs. 90 Cr · Enterprise rate negotiation — target <1.6%

Year 3: Gateway fees Rs. 3.2–3.5 Cr · Revenue Rs. 200 Cr · Multiple providers for competitive rate management

Year 4–5: International payments (5–8% of revenue from NRI diaspora); Buy Now Pay Later integration for D2C (EMI on furniture). Revenue Rs. 375–550 Cr.

Conclusion: Payment Gateway Plugin is Day 1 critical infrastructure. Without it, Furntec cannot enforce its defining structural advantage — payment-confirmed production — which is the primary working capital protection mechanism in the Year 1 operating model.